Design/Logic Flaw

Vulnerability of mutex management in the bone voice ID trusted application TA module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable...

Design/Logic Flaw

Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activated automatically...

Design/Logic Flaw

Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availability...

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

Code injection

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access sensitive data logged when a user shares a link...

Design/Logic Flaw

Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated automatically...

Design/Logic Flaw

This issue was addressed by enabling hardened runtime. This issue is fixed in Xcode 15. An app may be able to access App Store credentials...

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17. An app may be able to gain root privileges...

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, macOS Sonoma 14. An app may be able to access user-sensitive data...

Design/Logic Flaw

A use-after-free vulnerability exists in the footerr functionality of Hancom Office 2020 HWord 11.0.0.7520. A specially crafted .doc file can lead to a use-after-free. An attacker can trick a user into opening a malformed file to trigger this vulnerability...

Design/Logic Flaw

The issue was addressed with improved checks. This issue is fixed in iOS 17 and iPadOS 17, watchOS 10, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14. An app may be able to identify what other apps a user has installed...

Design/Logic Flaw

A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service DoS attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass...

Design/Logic Flaw

SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges...

Design/Logic Flaw

xunruicms up to v4.5.1 was discovered to contain a remote code execution RCE vulnerability in /index.php. This vulnerability allows attackers to execute arbitrary code via a crafted GET request...

CVE-2023-43192

SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy the original logic of SQL statements. Attackers can use this vulnerability to execute any SQL statemen...

CVE-2023-41079

The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14. An app may be able to bypass Privacy preferences...

CVE-2023-41067

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-41067

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...

CVE-2023-41067

A logic issue in Gatekeeper checks allowed an app to bypass Gatekeeper on macOS, fixed in macOS Sonoma 14. Affected: macOS Sonoma 14 and earlier with Gatekeeper checks bypass risk. CVE-2023-41067 impact involves local attacker with low complexity and low privileges; no user interaction required. ...

CVE-2023-41070

CVE-2023-41070 is an Apple vulnerability: a logic issue in the sharing flow could allow an app to access sensitive data logged when a user shares a link. Affected products include macOS (Ventura 13.6 and Sonoma 14), iOS (16.7 and 17), iPadOS (16.7 and 17), and watchOS (10). The issue is fixed in ...